About this role
Job Description
Role Purpose: Protect the Group's applications by identifying, assessing and reducing application security risks throughout the software lifecycle.
Key Responsibilities
- Perform application security assessments, code reviews and security testing.
- Manage and optimize application security tools and processes, including Checkmarx.
- Conduct threat modelling and security architecture reviews for applications.
- Support remediation of OWASP and application-specific vulnerabilities.
- Assess APIs, web applications, mobile applications and other digital channels.
- Work with development teams to establish and enforce secure coding practices.
- Support security testing before production release.
- Maintain application security standards, metrics and risk reports.
Requirements
-
Relevant degree or equivalent professional qualification in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline.
-
Relevant professional certifications will be an advantage and should align with the specific role.
-
Demonstrable practical experience relevant to the position.
-
Strong communication, analytical, documentation and stakeholder-management skills.
-
Ability to operate in a regulated, technology-driven and multi-business environment.
-
Preferred / Added Advantage Certifications
-
OSCP – Offensive Security Certified Professional
-
eWPT or equivalent web application security certification
-
CSSLP – Certified Secure Software Lifecycle Professional
-
Checkmarx certification/training (advantage)
Benefits
- Industry Standard